5f7e5b3ad1686b26bbfb63210828a956_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f7e5b3ad1686b26bbfb63210828a956_JaffaCakes118
Size

354KB
MD5

5f7e5b3ad1686b26bbfb63210828a956
SHA1

80d949182483ac330bfa7c49a951be6810c2f734
SHA256

6a221d768bee4012c56148f13fc969c0b0dc982a8f5661ed027dd87412eaf0d8
SHA512

149fe75f3281a6fac2fe10de2a0f95a243b22c6f6626c5996fcd860037f9067f0c16fa94e308f00c4b4bb07153621baef9e86f0b5c2e525c4bf94ea0d5c0c76e
SSDEEP

6144:g34Ho9kYZi8p5N8+rQ3+o63ezu1/rKXJi5y:goHoyYZi8p5N8+rQ3+o63ezu1/rKXJgy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f7e5b3ad1686b26bbfb63210828a956_JaffaCakes118

Files

5f7e5b3ad1686b26bbfb63210828a956_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 318KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ